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(57) ABSTRACT 

An authentication and/or tracking system for identifying, 
tracking, authenticating and/or otherwise checking the 
legitimacy of one or more items which include a coded 
identity tag or mark, the system comprising identification 
means for reading said coded identity tag or mark and 
identifying said one or more iteoos, storage means for storing 
information relating to the location, whether actual or 
intended, origin and/or ownership of said one or more items, 
and means for displaying or otherwise providing or verify- 
ing said information relating to an item when its identity tag 
or mark has been read. 
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REMOTK AUTHENTICATION SYSTEM 

[0001] This invc ni ion relates to a remote an authentication 
database that couki he used to allow monitoring and control 
of marked items which in turn facilitates product authenti- 
cation and idem ilL'u lion of said items. 

[0002] This invc ni ion encompasses three novel aspects. 
First is a means of using tmique identifiers on appropriate 
items in order to achieve a level of monitoring and control 
over such items that has not been possible previously. 
Second is a means of protecting the relevant data. Third is 
a coded fibre which can be used to mark suitable products. 

BACKGROUND TO THE INVENTION 

[0003] Some problems which the system of the invention 
(hereafter just **sysiem") alleviates include: coimterfeit trad- 
ing, product recall, parallel trading, shoplifting and many 
other forms of theft. 

[0004] Counter fe iling causes loss of profits to Brand Own- 
ers through loss of sales and loss of reputation. A major 
factor in dealing with the problem is that it is often very 
difficult for consumers to detect counterfeit items. 

[0005] Faulty goods often need to be recalled. The prob- 
lem here is that manufacturers can seldom trace where their 
goods are at the lime they need to be recalled. 

[0006] Theft in the form of shoplifting in particular is a 
well-recognised problem within all areas of commercial 
retail. The problem here is the difficulty of discovering a) 
whether a thief is leaving the premises with stolen property 
and b) distinguishing between goods which have been paid 
for and those which have not. 

[0007] Parallel Importing costs manufacturers by under- 
cutting the prices they set for a local maricet. It may also 
render them legally liable when goods intended for counu-y 
"A** do hot meet the legal standards set in country "B" where 
the price is higher and being undercut by parallel imports. 

[0008] Inventory Control. Manufacturers do not know 
how much stock of their product remains unsold within the 
supply chain. 

PRIOR ART 

[0009] International patent application WO99/04364-A1, 
which describes a method of verifying the authenticity of 
goods, includes generating one or more random codes and 
storing the one or more random codes in a database. The 
goods arc then marked with one of the generated random 
codes such that each of the goods contains their own unique 
random code. A reading and processing method is used to 
read the random code carried by a marked item and compare 
this code against those stored in the database. If the random 
code is found to be valid, the processing method can 
determine (from information held in a local database) 
whether or not that code has been read previously on another 
marked item, thereby verifying that the item is authentic (or 
otherwise). 

[0010] There are a number of problems and disadvantages 
associated with the above described arrangement. Firstly if, 
for example, a set of random codes were either duplicated, 
or generated and obtained illegitimately, and applied to a 
batch of counterfeit goods, the codes would still be found by 



the processing method to be valid and, in many cases, not 
previously read, thereby verifying the authenticity of goods 
which are in fact counterfeit. This problem is exacerbated by 
the difficulties inherently associated with updating a local 
database with, for example, all non-local sales of branded 
goods in real time. 

[0011] Further, international patent application number 
WO99/04364-A1 describes a method of detecting diversion 
of goods from a desired channel or channels of distribution. 
This method involves the generation of encrypted codes 
(each having a random portion and a non -random portion), 
which are applied to a batch of goods so that each item has 
its own unique encrypted code. The encryption of the codes 
is effected by an encryption key, each encryption key being 
unique to a particular channel or channels. Subsequently, 
within a particular channel of distribution, the various goods 
are inspected and it is verified whether the decryption key 
used on the code successfully reproduces the non-random 
portion which is uniquely dedicated for the channel distri- 
bution in question. Consequently, the method identifies 
whether a diversion of goods has occurred if the decryption 
key does not match that used on the ic]spected goods. 

[0012] In other words, if a channel shouU be using Public 
Key(PK) A and a product is intercepted with a PK code B 
mark on it, the use of the wrong PK iodicates that the 
product has been diverted from its proper distribution chan- 
nel. This makes it necessary to store a large nimiber of PK's 
in the supply chain's computers. 

[0013] Further, the requirement for treating different chan- 
nels of distribution separately makes the scheme unneces- 
sarily expensive to implement, and each implementation 
must be tailored separately. In addition, the reliance of 
decryption at the retail end in particular implies the need for 
special readers or dedicated local computer technology, 
which takes the adoption of the proposed scheme relatively 
expensive. 

'■,_».-. Li . ■ • . , ♦ -..^ • . 
[0014] The scheme described in international patent appli- 
cation number W099A)4364-A1, may include a tracking or 
similar fimction which may be implemented by including in 
the non-random portion a secret encrypted portion contain- 
ing tracking information. The codes may subsequently be 
decoded to determine tracking information, such as whether 
a tax has been paid. 

[0015] There are, however, a number of disadvantages 
associated with this. Using the tobacco industry's require- 
ments as an example. The government would have to create 
a large number of codes, keep them secure and issue them 
in advance of such payment) not to manufacuirers (who 
might be in a position to exert true security), but to those 
who have to pay duty (at the point of sale). This results in 
several weaknesses. Firstly, there are teas of thousands of 
retail outlets that would have to acquire the relevant equip- 
ment to adopt this scheme, and each of these outlets would 
have to be supplied with sufficient unfoigeable codes to 
apply to the goods (they cannot be pre-applied because, tmtil 
bought, no tax has been paid). Secondly, the routine sales 
areas must therefore adopt security measures which are 
likely to be extremely unrealistic. Thirdly, consider the case 
where France, Israel and South Africa (for example) want to 
adopt the scheme; this poses the problem of whose code to 
use to prove that the correct tax has been paid. Finally, the 
prior art proposal requires a huge number of different codes 
to be created in order to deal with different purposes. 
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[0016] loternational patent application WO99/04364-A1 
mentions the use of one-way bash fiinctions, but still 
requires the use of combination codes and PK's, whereas in 
the present invention no further fomn of encryption is 
required. 

[0017] Further, in WO99/04364-A1, a "hash" message is 
reconstructed by using a readable field until a match is 
found. However, this is quite time consuming and laborious. 
In a preferred aspect of the present invention, there is 
included a database in whidi is stored the originaJ codes 
alongside their "hash" values. This "field" can be indexed so 
that the matching of "hash" values is substantially instan- 
taneous (less than one second in over a billion records), just 
as it would be if one were searching for the original code. 

SUMMARY OF THE INVENTION 

[0018] In accordance with a first aspect of the present 
invention, there is provided an authentication and/or track- 
ing system for identifying, tracking, authenticating and/or 
otherwise checking the legitimacy of one or more items 
which include a coded identity tag or mark, the system 
comprising identification means for reading said coded 
identity tag or mark and identifying said one or more items, 
storage means for storing information relating to the loca- 
tion, whether actual or intended, origin, and/or ownership of 
said one or more items, and means for displaying or other- 
wise providing or verifying said information. 

[0019] The first aspect of the present invention also 
extends to a method of identifying, tracking, authenticating 
and/or otherwise checking the legitimacy of one or more 
items which include a coded identity tag or mark, compris- 
ing the steps of reading said identity tag or mark and 
identifying said one or more items, storing information 
relating to the location, whether acmal or intended, origin 
and/or ownership of said one or more items, and displaying 
or otherwise providing or verifying the. information relating^ 
to an item when its identity tag or mark has been read. This 
coded identity tag or mark can amongst others be in the form 
of a simple printed validation reference (VR) which could be 
represented by a bar code, bar coded tear-tape or security 
thread, radio frequency tag or ink (visual, fluorescent or 
magnetic), optical device such as a hologram or digitally 
printed device, organic chemical (such as a DNA tag) or 
inorganic chemical or complex printed image. 

[0020] Products which manufacturers need to protect from 
the above problems are provided with a unique identifier 
which is securely stored and subsequently traceable using a 
publicly accessible central authentication database. This 
unique reference is referred to within the system as a 
Validation Reference, hereafter abbreviated VR. 

[0021] The VR can be physically attached to the product 
in any way that is deemed suitable by the manufacturer. 

[0022] The VR must be verifiably unique within the 
product type for the manufacturer. 

[0023] All the VRs created by a manufacnirer must be 
stored on a ccnUally and publicly accessible database. This 
database must store basic despatch details in addition to the 
VR. It must also record the inquiries or authentication 
attempts made against each VR. 

[0024] Various agencies and consumers will need to 
access this database. They will typically enter, into a com- 



puter based form, the VR attached to the product and the 
system will inform them whether or not the VR has a match 
in the central database. A match indicates that the product is 
probably authentic, unless the VR has already been regis- 
tered elsewhere. In addition, the time and place of authen- 
tication are also considered. If a valid VR is in the wrong 
place or in the right place but at the wrong lime, this 
indicates the probabiUty of counterfeit. 

[0025] It is essential that, until the marked goods are 
actively selling fi-om retail sites, VRs are not accessible to 
potential counterfeiters. 

[0026] In the preferred embodiment of the system, the 
requirement to ensure that VRs are kept out of the hands of 
counterfeiters is met by a novel method of storing the 
valuable data. Instead of storing plaintext, the VR is con- 
verted to a "message digest" using a "one-way 'hash" 
fiinction", subsequently referred to as a "hash". Thai digest 
is stored in place of the VR. Such digests are provably 
irreversible. The only method of decoding one is to generate 
suflScient random strings to ensure that a match is found. For 
the "hash" function used in the preferred embodiment, this 
means that if 10,000 hashes were to come into the posses- 
sion of a counterfeiter, he would need to create approxi- 
mately 1.3x10^'^ strings to find a single match amongst the 
10,000. This is currently computationally infeasible in that 
by today's standards each such search would require some 
third of a million years processing time of the worlds fastest 
computers. 

[0027] As VRs in this form are substantially of no va lue to 
the counterfeiter, the security problem of guarding the data 
on the central database is considerably reduced. 

[0028] For many products that require protection, the 
database will provide the first step in tackling a case of 
counterfeit goods. It will identify that a problem exists. It 
will then be necessary to prove, to the satisfaction of a court, 
that the product either is (and purports not to be) tlie genuine 
article or is counterfeit (but purports to be genuine). This 
may fi-equently require a forensic test. For products that 
don't include unique forensic markers the promoters of the 
invention offer a coded fibre which can be deployed in a 
niunber of ways in order to provide the required evidence. 
It is described in detail in European Patent No. 0721529. 

[0029] Having been thus marked and having stored the 
information relating to that mark, it becomes possible to 
tackle the problems outlined above. In summary, one of the 
key dififerences between the present invention and the 
arrangement described in WO99/04364-A1 is that that prior 
art arrangement envisages "tracking" to be a passive func- 
tion achieved by means of selective code generation 
whereby the code indicates the prospective destination. In 
the present invention, the use of active tracking is much 
more flexible and universally applicable. Only one code is 
required wherever the goods are destined to arrive. The 
transit details are preferably stored separately in association 
with that code. Field checking and preferably consumer 
registration is used to determine where goods are, and the 
database is used to determine whether or not that is where 
they should be. 

[0030] If DO VR exists either on a pioduct that should 
display the code or a VR appears on a product but not within 
the authentication database then the product cannot be 
legitimate. 
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[0031] If a VR exists but has already been registered as in 
the hands of a consumer, or other legitimate holder then 
either the registered product or the one being checked can 
reasonably be assumed to be counterfeit. Forensic testing 
might then be required to establish which one is genuine. 
This is an example of where the coded fibre might be 
usefully deployed. 

[0032] If a VR exists but is reported in the wrong place or 
at the wrong time then it can reasonably be assumed to be 
counterfeit. 

[0033] If a product carrying a VR is tracked going through 
the door of a retail outlet and it hasn't been paid for it can 
reasonably be assumed that it is being stolen. 

[0034] To be effective, the VR must contain a unique 
element that is verifiably not associated with any other 
similar item produced by the relevant manufacturer. 

[0035] This is a simple matter for appropriate software. It 
does not matter if two unrelated items share a VR. The 
combination of their make, model and VR will still produce 
a universally unique identifier. 

[0036] Preferably, the method used to attach the VR 
should be compatible with (i.e. readable by) the machine 
readers likely to be already in situ throughout the supply 
chain. This alleviates the huge expense of supplying a new 
infrastructure to service the system. Provided this criterion 
is met, any method of labelling or attaching the VR which 
suits the manufacturer will be compatible with the system. 
Hereafter, all such means are referred to generically as 
"labels". 

[0037] For consumer registration purposes it is currently 
essential that the VR is readable by the consumer. This 
means it must appear visually in plaintext Future develop- 
ments may allow other options. 

[0038] For asset tracking, anti-theft and some anti-coun- 
terfeiting purposes (where, for example, a forensic marker is 
desirable), the mark may need to be covert and/or structur- 
ally incorporated into the item. 

[0039] If an item requires more than one of the above 
protections, it may well also require more than one tag. It 
may also use different data in each tag. For example, a pair 
of Jeans may have a human readable label beneath a 
standard barcode for machine readability in order to facili- 
tate the tracking and registration objectives. These may 
share the same code. Manufacturers may, in addition how- 
ever, incorporate the aforementioned coded fibres into the 
fabric of the jeans at the weaving stage. The codes used for 
this purpose could be unrelated to the previous codes and 
may, for example, only be readable under a microscope in a 
forensic laboratory engaged to verify authenticity. 

[0040] In accordance with a second aspect of the inven- 
tion, there is provided a data management system for passing 
or identifying data between a first node and a secoiKt node, 
said first and second nodes independently having access 
(direct or otherwise) to a copy of said data, said first node 
having means for converting said data into a substantially 
irreversibly encrypted code representative of said data and 
passing only said code (i.e. not said data) to said second 
node, said second node having means for identifying the 
data represented by said code. 



[0041] The second aspect of the present invention also 
extends to a method of data management for securely 
passing or identifying data beiwcen a first node and a second 
node, the method comprising the steps of providing inde- 
pendent access (direct or otherwise) to said data to each of 
said first and second nodes, converting at said first node said 
data into a substantially irreversible encrypted code repre- 
sentative of said data, passing only said code (i.e. not said 
data) from said first node to said second node, and identi- 
fying at said second node the data represented by said code. 

[0042] Thus, the second aspect of the present invention 
provides a method and system whereby the functional 
requirements of key data can be entirely ftilfilled by coded 
replacements for the data, specifically by means of convert- 
ing the key data into codes or digests using one-way 
encryption techniques, such as one-way hash functions or 
any other (possibly future) algorithms which achieve sub- 
stantially the same end (i.e. the creation of substantially 
irreversibly encrypted codes or digests representative of the 
key data, allowing for more secure handling of the data. It 
will be apparent that no decryption of the code is required at 
the second node (because it has independent access to the 
data in its own right), simply recognition thereof. 

[0043] Preferred unique identifiers will be designed to 
make it impossible for potential fraudsters to abuse the 
system. For example, by creating a key consisting of 20 
random characters representing any one of 256 ASQI (like) 
symbols, this makes possible a code with 20^^* possible 
combinations — ^well beyond the ability of existing computer 
processing capacity to crack. Because such codes would 
include unprintable characters, they would, currently, be 
suitable for machine readability only. 

[0044] For product registration, where the code needs to 
be retrieved visually, a code based on 20 of the 36 upper case 
unambiguous keyboard characters found on most European 
and American keyboards allows 36^° combinations. This is 
still considered to be considerably beyond present day 
computing capacity. 

[0045] To prevent errors on input, the preferred embodi- 
ment would incorporate a 25-character string incorporating 
1 check character for each 4 random characters. This would 
be presented in 5 blocks of 5 characters — similar to popular 
modem software license keys. 

[0046] To allow remote interrogation of the database, so 
called "thin clienf* software will be distributed to aUow 
consximers to enter the VRs with minimal errors. Their input 
will be converted to its corresponding "hash" values before 
being passed to the central database for matching. 

[0047] Thin client software will also be distributed to 
agencies such as Customs, Police (public and private) and 
key points in the supply chain. This version of the software 
will permit machine input and interrogation of data other 
than just VRs. 

[0048] Preferably, the VRs will be generated by the manu- 
facturers only shortly before the labels are required. The 
labels will be printed, attached and scanned as the goods are 
packed into cartons. The Carton identifiers will be stored. 
Cartons will be scanned as they are loaded onto pallets (or 
similar) and pallets will be scanned as they are loaded into 
consignments (etc). Relevant identifiers will be stored for 
however many packing stages are required 
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[0049] When the consignment is ready to leave, the manu- 
facturer will use appropriate software to prepare a file 
containing one record per VR. Each such record will also 
contain the above identifiers. It will also, preferably contain 
the relevant order numbers, despatch date, source and des- 
tination. The file will be transmitted securely to the central 
database. 

[0050] Agents in the field who need to access the database 
can thus be informed, for example, which cartons should be 
in a consignment and which VRs should be in whidi cartons. 
Or whether a given VR should be in the consignment at all. 

[0051] Agents will be provided with suitable means of 

secure access. 

[0052] Authorised users in the supply chain could also use 
the system to confirm either that the products they are 
holding are legitimate or to monitor the progress of expected 
deliveries. They will also be provided with the means to: 

[0053] (1) update the system database with information 
regarding any deliveries; 

[0054] (2) inform the system of their own consign- 
ments; and 

[0055] (3) when a delivery consignment is broken down 
into 2 or more despatch consignments, to provide the 
system with relevant details of the split (i.e the contents 
of the new consignments) and the new consignment 
identities. 

[0056] In order lo protect the integrity of the database, in 
its preferred form, in addition to normal storage on high 
speed storage and retrieval media, it will be simultaneously 
stored on unreadable media known in the art as WORM 
(Write Once Read Many) media. Both the WORM media 
and standard media will be duplicated across a number of 
predetermined locations. 

[0057] Its access and update protocols will be designed to 
permit such access only by means of an Access log which 
records all details of requests for access and/or any data 
uploaded to the system and stores this data on WORM media 
before peimitting the data to be recorded on standard media. 
No deletions will be permitted and amendments will only be 
permitted in the form of corrective additions. The WORM 
media will thus provide a robust audit trail should anyone 
attempt to subvert the system. The contents of the Access log 
will be on permanent public view with standard non-disclo- 
sure rules to protect the identities of those accessing the 
system. 

[0058] The present invention provides a method and sys- 
tem that can be used to track products or items and can be 
used not only to verify the validity of a code or to check 
whether the code has been used before, but also to check 
whether the code is being used at the right time and/or in the 
right place. Failure to meet any of these criteria identifies a 
potential counterfeit. As a spin off, monitoring to this degree 
provides the ability to identify parallel trading (where the 
goods in transit might well be legitimate and even legally 
transported, but still in breach of contract or trading agree- 
ments), and to pinpoint wherever the goods are located in the 
supply chain, for the purposes of inventory control and 
product recall. Subject to technology allowing remote read- 
ing of the VRs, the system also provides the basis for a 
powerful anti-theft mechanism. 



[0059] Key preferred elements, among others, of the 
present invention are: 

[0060] Storage of authentication data in a centrally 
accessible database; 

[0061] Storage of '^hash" values (only) in place of the 
valuable components of that data; 

[0062] Indexing of the "hash" values to make the data 
easy to search; 

[0063] Logging all access to the database in a pub- 
licly visible manner; 

[0064] Storing the access log on non amendable 
media; 

[0065] Storing the access log and data in multiple 

locations; 

[0066] Allowing additions or amendments to the data 
only through the access log; 

[0067] Allowing detailed interrogation of the data 
only through the access log. 

[0068] The system will be able to achieve its goals 
because it is able to answer the fundamental question (''does 
this identity, exist?") without the need to know what the 
identity is. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0069] An embodiment of the invention will now be 
described by way of example only with reference to the 
accompanying drawing3, in which: 

[0070] FIG. 1 is a schematic flow diagram illustrating the 
operation of a produa tracking system which makes use of 
and is an exemplary embodiment of the authentication 
aspect of the invention; 

[0071] FIG. 2 is a schematic flow diagram of the con- 
sumer authentication operation of the system of FIG. 1; 

[0072] FIG. 3 is a schematic flow diagram of the upload 
activity (by manufacturers) of the system of FIG. 1; 

[0073] FIG. 4 is a schematic flow diagram of the non- 
consumer (Police, Customs etc) authentication operation of 
the system of FIG. 1; 

[0074] FIG. 5 is a schematic flow diagram of a movement 
inquiry operation of the system of FIG. 1. 

DETAILED DESCRIPTION OF THE 
INVENTION 

[0075] Referring now in particular to FIG. 1 of the draw- 
ings, an exemplary embodiment of a product tracking sys- 
tem according to the invention comprises a central database 
(10) on which are stored the "hash" values of the identity 
tags together with product tracking data. The system 
includes means (12) for processing administrative enquiries, 
such as the current location of a consignment of products. 
The system also includes means (14) for processing authen- 
tication enquiries, and means (16) for deahng with all data 
upload activity. These are standardised proxy procedures 
with which persons skilled in the art would be familiar. 

[0076] The authentication process is shown in more detail 
in FIG. 2. The consumer can send an authentication request 
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to the system id many different ways, as discussed above. lo 
one such method, in response to a request from the user, an 
on-screen form is provided for the consumer to complete 
details such as the identity tag, pioduct code if relevant, date 
and place of purchase. The system uses the form to prepare 
an authentication request and, if necessary, converts key data 
to a "hash" value. The data is then compared with data held 
in the database (10) which checks if the identity tag is 
legitimate, if the product is in the correct location, and 
whether or not the product has been previously registered. If 
these enquiries produce the correct results, the product is 
authenticated and the consumer can be informed accord- 
ingly. If not, a suitable alarm/report procedure, which may 
be determined by the manufacturer for example, is triggered. 

[0077] The upload activity of the system is shown in more 
detail in FIG. 3 of the drawings. A manufacturer has 
completed a production batch and it is ready for shipping. 
They need to upload the relevant data to the Authentication 
Database. 

[0078] All the data has been prepared by appropriate 
software. Each individual item will have been given its VR 
and the hashes of those VRs, together with, at least, the 
minimal data outlined above, will be transmitted by the 
software to the Authentication Database. Procedures will 
need to be in place to ensure that only authorised users can 
be allowed to perform this task, but other then validate 
themselves to the system, the users will have little to do 
other than authorise the transfer. Everything else would be 
automated. 

[0079] However, the uploading of data from a legitimate 
source is a particularly sensitive transaction. Id the preferred 
embodiment of the system, therefore, it would be prudent to 
ensure that no upload can proceed until at least one other, 
preferably randomly selected, authorised user has beeD 
contacted and has confirmed the legitimacy of the upload. 

[0080] The non-consumer authentication process operates 
in a very similar manner to the consumer authentication 
process and is shown in more detail in FIG. 4 of the 
drawings. Similarly, the data upload activity used is very 
similar to that described with reference to FIG. 3 of the 
drawings, and is shown in more detail in FIG. 5. 

[0081] Embodiments of the invention have been described 
herein by way of example only, and modifications and 
variations will be apparent to a person skilled in the art, 
without departing from the scope of the invention. 

1. An authentication and/or tracking system for identify- 
ing, tracking, authenticating and/or otherwise checking the 
legitimacy of one or more items which include a coded 
identity tag or mark, the system comprising identificatioa 
means for reading said coded identity tag or mark and 
identifying said one or more items, storage means for storing 
information relating to the location, whether actual or 
intended, origin and/or ownership of said one or more items, 
and means for displaying or otherwise providing or verify- 
ing said information relating to an item when its identity tag 
or mark has been read. 

2. A data management system for passing or identifying 
data between a first node and a second node, said first and 
second nodes independently having access (direct or other- 
wise) to a copy of said data, said first node having means for 
converting said data into a substantially irreversibly 



encrypted code representative of said data and passing only 
said code (i.e. not said data) to said second node, said second 
node having means for identifying the data represented by 
said code. 

3. A system according to claim 1, wherein said identity tag 
or mark is incorporated in or on said one or more items* and 
is preferably in the form of a coded fibre or filament. 

4. A system according to claim 3, wherein said coded fibre 
or filament carries a barcode, which is optically readable by 
barcode reader or scanner. 

5. A system according to claim 4, wherein said bar code 
is substantially at right angles to the length of said fibre or 
filament. 

6. A system according to any ooe of claims 3 to 5, wherein 
said coded fibre or filament is incorporated into a label 
carried by the or each item. 

7. A system according lo claim 6, wherein said label is of 
S paper or textile material. 

8. A system according to any one of claims 3 to 5, wherein 
said coded fibre or filament is incorporated or blended into 
the material, for example paper, textile or plastics material, 
which forms at least part of the or each item. 

9. Asystem according to any one of claims 3 to 8, wherein 
said coded fibre or filament comprises plastics material to or 
on which is applied a bar code. 

10. Asystem according to claim 9, wherein said bar code 
is produced by printing with fluorescent ink. 

11. A system according to claim 9 or claim 10, wherein 
said identity tag is produced by applying a bar code onto a 
plastics film across the effective width thereof and dividing 
the film substantially at right angles to the bar code into 
longitudinal filaments. 

12. A system according to any one of claims 1 to 11, 
comprising means for applying substantially identical iden- 
tity tags or marks in, on or to each of a plurality of items in 
a batch of items to be transported from a first location to a 
second location, means for allocating an identity code to be 
associated with said batch, means for storing information 
associated with said identity code, said information relating 
to the location of said batch (whether actual, expected and/or 
intended), means at said second location for logging the 
arrival of said batch and means for allocating a unique 
identity code to each of a plurality of smaller consignments 
of items derived from said batch, means for storing infor- 
mation associated with each of said unique identity codes, 
said information relating to thee location of each of said 
coosigrunents (whether actual, expected and/or intended). 

13. A system according to any one of claims 1 to 11, 
comprising means for applying different identity tags or 
marks in, on or to each of a phirality of items, and means for 
storing information relating to the departure of each of said 
items from a first location and/or its arrival at one of a 
plurality of second locations. 

14. Asystem according to claim 13, including means for 
identifying identity tags or marks on items leaving a prede- 
termined area or location, means for identifying whether 
said item is legitimately permitted to leave said area or 
location, and means for raising an alarm or warning if said 
item is not pemoitted to leave said area or location. 

15. Asystem according to claim 13, including means for 
storing information relating to the contents of a batch of 
items having different identity tags or marks applied thereoD, 
information relating to the departure of said batch from a 
first location, information relating to the arrival of said batch 
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at a second location, and inforniation relating to the subse- 
quent (actual or intended) destination of each of said items. 

16. A system according to any one of claims 1 to 15, 
wherein said means for identifying said identity tag or mark 
comprises means for converting information relating to a 
plurality of identity tags or marks into substantially unique 
codes using a predetermined algorithm, means for storing 
said codes in a predetermined location, means for converting 
information relating to an identity tag or mark which has 
been read into a code using said predefined algorithm, and 
means for comparing said code against said stored codes to 
determine whether said identity tag or mark is legitimate. 

17. A system according to claim 16, wherein said codes 
comprise "hash" values or other irreversible message 
digests, preferably having 20 or more characters. 

18. A system according to claim 16, or claim 17, wherein 
said information relating to the locations origin and/or 
ownership of said one or more items, is stored on unreadable 
media (in addition to any storage on standard media) in a 
number of predetermined alternative locations, remote from 
said first predetemained location. 

19. An authentication and/or tracking system for identi- 
fying, tracking, authenticating and/or otherwise checking 
the legitimacy of one or more items substantially as herein 
described with reference to the accompanying drawings. 

20. A method of identifying, tracking, authenticating 
and/or otherwise checking the legitimacy of one or more 
items which include an identity tag or mark, comprising the 
steps of reading said identity tag or mark and identifying 
said one or more items, storing information relating to the 
location, whether actual or intended, origin and/or owner- 
ship of said one or more items, and displaying or otherwise 
providing and/or verifying the information relating to an 
item when its identity tag or mark has been read. 

21. A method of applying substantially identical identity 
tags or marks in, on or to each of a plurality of items in a 
batch of items to be transported from a first location to a 
second location, storing information relating to the departure 
of said batch of items from said first location and the arrival 
of said batch of items at said second location, dividing said 
batch of items into a plurality of smaller consignments of 
one or more items to be transported or distributed from said 
second location to one or more third locations, and storing 
information relating to the departure of said consignments 
£rom said second location and their arrival at said one or 
more third locations. 



22. A method comprising the steps of applying different 
identity tags or marks in, on or to each of a plurality of items, 
and storing information relating to the departure of each of 
said items from a first location and/or its arrival at one of a 
plurality of second locations. 

23. A method according to claim 22, further comprising 
the step of storing information relating to the contents of a 
batch of items having different identity tags or marks applied 
thereon, the departure of said batch from a first location, its 
arrival at a second location, and the subsequent (actual or 
intended) destination of each of said items in said batch. 

24. A method according to any one of claims 21 to 23, 
wherein said step of identifying said identity tag or mark 
comprises the sub-steps of: 

i) converting information relating to a plurality of identity 
tags or marks into individual codes using a predefined 
algorithm; 

ii storing said codes in a first predetermined location; 

ii converting information relating to an identity tag or 
mark which has been read into a code using said 
predefined algorithm; and 

iv comparing said code against said stored codes to 
determine Whether said identity tag or mark is legiti- 
mate. 

25. A method according to claim 32, wherein said codes 
comprise "hash'* values or other irreversible message 
digests, preferably having 20 or more characters. 

26. A method according to claim 24 or claim 25, wherein 
said information relating to the location, origin and/or own- 
ership of said one or more items is stored in a nuimber of 
other predetermined locations, remote from said first prede- 
termined location and on unerasable media. 

27. A method according to claim 22, comprising the steps 
of storing purchase information relating to items having said 
identity tags or marks applied thereon, means for identifying 
the identity tags or marks of items; leaving a . predetermined\>t 
area, means for determining if said item has been purchased 
or is otherwise legitimately permitted to leave said area and 
if not, for raising an alarm or warning. 

28. A method of identifying, tracking, authenticating 
and/or othenvise checking the legitimacy of one or more 
items, the method being substantially as herein described 
with reference to the accompanying drawings. 

« « * * ♦ 
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